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(54) Method and apparatus for ID-based public key generation 



(57) There is disclosed a method and apparatus for 
the generation of public key in a cryptosystem that is 
created based on a user definable and recognizable ID 
of ASCI I characters. The apparatus comprises of a com- 
puter means (1 ) having at least a processor (2), a mem- 
ory unit (3), an input device (4) and a key generation 
module (5) residing in the memory unit (3). When exe- 
cuted, the key generation module processes the user- 
definable and recognizable ID of ASCII characters in- 
putted via the input device to generate the public key. 
Triple DES, Advance encryption system (AES), secure 
hash algorithm (SHA) and elliptic curve encryption algo- 
rithm are applied to arrive at the desired objectives. A 
PC-based implementation of such method is also pre- 
ferred. 
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Description 

1 . TECHNICAL FIELD OF THE INVENTION 

5 [0001 ] The present invention relates generally to the field of cryptography and, particularly, to a method and apparatus 
for public key generation in a cryptosystem that is created based on a user definable and recognizable ID of ASCII 
characters. The present application also relates to a PC-based cryptosystem that generates public key for use in 
association with the manipulation of digital data and/or transmission of messages and data over communication chan- 
nel. Further, the present invention relates to a cryptosystem that is suitable for multi-functional security applications. 

10 

2. BACKGROUND OF THE INVENTION 

[0002] The art of encryption and decryption to sent and receive messages are known since ancient time. In the past, 
secret messages may be transmitted over communication medium through the used of symbols, riddles or the likes. 
15 in modern times, special purpose software programs in combination with equally special purpose computer hardware 
are used, for example, to hide underlying contents, limit access, inhibit reverse engineering, authenticate sources and 
some other secure or secret messaging activities. 

[0003] Millions of computers in the world are connected to each other through the Internet. In effect, this medium of 
communication provides the single most promising channel with regard to transmission of data and messages, the 

20 exchange and dissemination of ideas, the conduct of business and many other related activities. Transmitted messages 
delivered through the Internet or any other on-line connection may be subjectto unauthorized use, unauthorized access 
and other unlawful acts. Such acts may be reduced or eliminated altogether through the use of cryptosystem. Crypto- 
system allows the transmission of unintelligible, except for the intended receivers, messages of a particular importance. 
There are two general types of cryptographic algorithm in application today, a symmetric and asymmetric (or Public 

25 Key cryptosystem). In a symmetric algorithm, encryption key can be calculated from the decryption key and vice versa. 
Typically, the encryption key is the same as the decryption key and has to be shared. As such, the sender and receiver 
have to agree on or have the keys before they can protect their communication using encryption process. If the key is 
divulged to an unauthorized party, messages within the encrypted data can be viewed or tampered with by the unau- 
thorized party without any hindrance. On the other hand, asymmetric algorithm or public key encryption algorithm 

30 requires more sophisticated and large hardware configuration due to the increase of computational steps and needs. 
The keys used for encryption and decryption differ in such a way that at least one key is computationally impossible 
to determine from the other. The keys will come in pairs, a public key (encryption) and a private key (decryption), and 
for the purpose of secrecy and preservation of the data integrity, the decryption key is to be kept secret, whereas the 
public key may be made available to all. Messages encrypted using the public key can only be decrypted using the 

35 corresponding private key. 

[0004] In general, such asymmetric cipher tends to be slower compared to the symmetric ones, particularly due to 
the larger key sizes. However, using algorithm based on a known elliptical curve discreet log problem, or elliptic curve 
cryptosystem as proposed by the present invention, much smaller keys can be used. In turn, this smaller key require- 
ment does help in speeding up the processing time. The smaller key size is desirable, as it would be suitable for PC- 

40 based application or in other small or mobile communication multi-function security device applications. The proposed 
cryptosystem overcomes the limitations of the known system and allows the application on PC, small or mobile com- 
munication devices for multi-function security application, in addition to the server-based application. 
[0005] It is therefore an object of the present invention to provide a solution to the problems associated with the 
known asymmetrical encryption/decryption method and apparatus. The proposed invention uses Elliptic Cryptosystem 

45 (ECC) or even the Rivest-Shamir-Adleman (RSA) cryptosystem and any other suitable algorithms to generate secure 
key pairs. In general, ECC provides greater efficiency than either integer factorization systems or discrete logarithms 
systems, in terms of computational overheads, key sizes and bandwidth. In its implementation, these savings mean 
higher speeds, lower power consumption and code size reduction. As a result, a PC-based application may use such 
system that would normally require much bigger set-up, for example server with equally larger hardware configuration. 

50 in addition, ECC offers high level of security. For example, an Elliptic curve E(Z p ) with a projected point PE (Z p ) whose 
order is a 1 60-bit prime p offers higher level of security as RSA with a 1024-bit modulus N, where N = P*Q. It is also 
the primary object of the present invention to utilize an easily remembered or recognizable ASCII characters as an 
input to generate the public key by setting parameters of ECC by spreading the public keys using symmetric encryption 
and using a proprietary prime number generator. 

55 

3. SUMMARY OF THE INVENTION 

[0006] It is therefore an object of the present invention to provide an apparatus for the generation of public key for 
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use in association with a multi-function security system. 

[0007] It is yet another object of the present invention to provide a method for the generation of a public key based 
on user-defined ID as input in a cryptosystem. 

[0008] It is also another object of the present invention to provide a PC-implemented encryption/decryption in a 
5 cryptosystem. 

[0009] These and other objects of the present invention are accomplished by providing, 

[0010] An apparatus adapted for the generation of a public key for use in association with encryption and decryption 
of digital data, said apparatus comprises of:- 

10 a computer means (1) having at least a processor (2), a memory unit (3) and an input device (4); and 

a key generation module (5) residing in said memory unit; 

characterized in that:- 

15 

said key generation module processes a user-definable and 

recognizable ID of ASCII characters that is inputted via said input device to generate said public key. 

[0011] The objects of the invention may also be accomplished by providing, A method for generating a public key 
20 for use in association with encryption and decryption of digital data comprising:- 

a key generation module (5) residing in a memory unit (3) of a computer means (1), said computer means having 
at least a processor (2), said memory unit (3) and an input device (4); 

25 characterized in that :- 

said key generation module (5) processes a user-definable and recognizable ID of ASCII characters inputted via 
said input device to generate said public key, said method comprises the steps of:- 

30 a) setting at least six predetermined master keys (MasterKey 0, MasterKey 1, MasterKey 2, MasterKey 3, 

MasterKey 4, MasterKey 5); 

b) randomizing said inputted user-definable and recognizable ID of ASCII characters and computing a modulus 
P associated with said user-definable and recognizable ID of ASCII characters; 

c) computing first (A), second (B), third (X) and fourth (D) variables by encrypting said inputted user-definable 
35 and recognizable ID of ASCII characters based on said first master key MasterKey 0) and subjecting said 

encrypted user-definable and recognizable ID of ASCII characters to a hashing function and thereafter, dividing 
it into four equal length variables, said equal length variables correspond to said first (A), second (B), third (X) 
and fourth (D) variables, respectively; 

d) determining the prime number associated with each of said variables; 

40 e) randomizing the prime number of said first (A), second (B) and third (X) variables in step d) by encrypting 

each of said prime number based on said second master key (MasterKey 1), third master key (MasterKey 2) 
and fourth master key (MasterKey 3), respectively; 

f) hashing said encrypted first (A), second (B) and third (X) variables in step e) and determining the prime 
number associated with each of said variables; 
45 g) defining the prime number of said third (X) variable as X 0 ; 

h) initializing the initial point (X 0 ) on an elliptic curve as defined by Y 0 2 = X 0 3 + AX 0 + B (mod P) equation, and 
computing the corresponding initial point (Y 0 ); 

i) encrypting the prime of said fourth variable (D) in step d) based on said fifth variable (MasterKey 4) and 
thereafter subjecting said encrypted variable to a hashing function and defining it as a private key associated 

50 with said inputted user-definable and recognizable ID of ASCII characters; 

j) computing a projection point (X-^Y-i) of said public key on the elliptic curve by multiplying said initial point 
(X 0 ,Y 0 ) with said fourth variable (D) computed in step i); and 

k) defining said public key set as a series of X 0 ,Y 0 , X-,,Y.|,A,B and P computed from the steps of a) to j). 

55 [0012] Preferably, strong symmetric encryption systems for example, Triple DES (3DES) and Advance Encryption 
System (AES), or other known strong public key encryption systems such as ECC and RSA, are employed in the 
encryption process. 

[001 3] Also preferable, an Elliptic Curve Encryption algorithm is utilized for determining the prime number associated 
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with the variables in the process. 

[0014] Also preferable, Secure Hashing Algorithm (SHA) is utilized in the process. Such SHA function may include 
SHA-1 , SHA-2 or other strong hashing as known in the art. 

5 4. BRIEF DESCRIPTION OF THE DRAWINGS 

[0015] The embodiments of the invention will now be described, by way of example only, with reference to the ac- 
companying figures in which : 

10 Figure 1 shows a block diagram representation of an apparatus to implement cryptosystem according to the present 

invention; 

Figure 2 shows a flow chart of the method of generating public key in a cryptosystem according to the invention; and 
15 Figure 3 shows a flow chart of the optional further process following the steps depicted in Figure 2. 

5. DETAILED DESCRIPTION OF THE DRAWINGS 

[001 6] Referring now to the figures, especially to Figure 1 , which shows an apparatus for the generation of a public 

20 key configured according to the embodiment of the present invention. In its minimum configuration, the apparatus may 
include a computer means (1) having a processor (2), a memory unit (3) and an input device (4) operably connected 
to each other. In addition, the computer means (1 ) may also include a storage device (not shown), display (not shown), 
network card (also not shown) and any other related components as generally known in the art. Residing within the 
memory unit (3) is a key generation module (5) that once executed, processes the inputted information keyed-in via 

25 the input device (4) to generate public key for use in the manipulation of digital data and information as mentioned in 
the earlier portion of this description. In contrast to the other known cryptosystems, the key generation module (5) 
processes a user definable and easily recognizable ID that is inputted via the input device (4). This inputted ID is 
advantageously based on the common ASCII characters. Such user definable and recognizable ID includes for exam- 
ple, specific name related to the user, for example Adam, Mohamad, Jim, 888-888 etc., or his company name, for 

30 example ABCEnterprise_Adam, XYZCorporation_Mohamad, etc. or any other desired ID's phrases. The inputs could 
be of the easily remembered phrases, which may consist of numbers, words or its combination, and it will be used as 
an input or seed to generate true public key for use in the encryption and decryption of digital data. Advantageously, 
it may be used for the purpose of secure storage and retrieval of data, transmitting and receiving information, secure 
communication, data acquisition, banking and etc. The processor shown in the figure may also include a single or a 

35 plurality of processors linked together. The memory unit (3) may include the typical harddisk, RAM or ROM. Further, 
the input device (4) includes either a keypad, keyboard, mouse or similar pointing device. A virtual keypad, touch 
screen, a telephone and other computer may also be part of such input device. In general, the apparatus may be 
implemented as a single stand-alone PC, or a server having connected thereto multiplicity of PC, dumb terminals or 
the like. 

40 [0017] Figure 2 shows a flow chart representing the process to generate a public key according to invention. As 
indicated earlier, a user-definable and recognizable ID (chosen from the known ASCII characters as discussed earlier) 
is used to generate the public key by this method. Referring to the figure, the process starts at START (10). The master 
keys (MasterKey 0, MasterKey 1 , MasterKey 2, MasterKey 3, MasterKey 4, MasterKey 5) are set at (20). These master 
keys may vary according to the requirement of the system owner. However, for compatibility purpose, these master 

45 keys should be the same throughout. In the current applications, the master keys are set to have at least 256 bits in 
length. It is envisaged that for future applications, the master keys may have shorter or longer length to suit future 
requirements. The inputted ID is then converted into its binary equivalent (30). It is then subjected into a randomizing 
process in accordance to a preset formula and the modulus P is computed (40). The modulus P is defined as NextPrime 
P as shown in step (40). 

50 [0018] In step (50), the value of variables A, B, X and D associated with the inputted ID are computed. These variables 
are computed through the following process :- 

At first, the inputted ID (in binary) is encrypted using symmetric encryption algorithm such as 3DES, AES, IDEA 
or other encryption algorithms, as a function of the first master key (MasterKey 0). The encrypted ID is then sub- 
55 jected to a hashing function, preferably using a strong hashing function such as SHA-1 , AES 256 or SHA-2. The 

output becomes a randomized and it will be divided into four, equal length variables, i.e., first variable (A), second 
variable (B) third variable (X) and fourth variable (D). The prime number associated with each of the variables is 
then determined. 
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[0019] To illustrate this process, let the inputted user definable and recognizable ID of ASCII characters to be as the 
following:- 

ID = b 0 b-|b2b3b 4 ...b n (shall be in binary format). This ID is then subjected to an encryption process based on the 
first master key (MasterKey 0), i.e., ID encrypted <- Symmetric Encryption (ID, MasterKey 0). It will then be subjected 
to a hashing function. The outcome will then be divided into 4 equal length variables (A, B, X, D). Based on these 
variables, a prime number generator is called upon to generate 256-bits prime number associated with each of 
the variables. This process can be illustrated by the following:- 

Let A ^ — aQa.|a 2 a 3 a 4 . . a^ 
B <- b 0 b 1 b 2 b 3 b 4 . . b m 
X <— x 0 x 1 x 2 x 3 x 4 . . x m 
D <r- d 0 d 1 d 2 d 3 d 4 . . d m 

[0020] First the prime generator will project the numbers to the target size. Let Q = p 0 Pi P2P3P4 ■ ■ p m be a list of prime 
numbers starting from 2,3,5,7, 11 and so on. The bits shall be used as an input and used as the seed to get 256-bits 
number before next prime function is invoked to make them prime. Let us consider another 4 groups (R, S, U, V) of 
random number consists of {1 ,2,3,4, ...z} for some natural number z chosen for a particular system in order to make it 
distinct from one another. Therefore, 

R =W2 r 3 r 4-- r m 
S = s 0 s.|S 2 s 3 s 4 . . s m 

U = u 0 u lU2 u 3 u 4 . .u m 

V = v oVl v 2 v 3 v 4 . . v m 

[0021] Projection of the raw parameters are to be made so that they will become 256-bit number. Then, 

A aO+rO a1+r1 a2+r2 a3+r3 a4+r4 am+rm 

A <- P 0 'Pi • P 2 • P 3 • P4 -Pm 

D bO+sO b1+s1 b2+s2 b3+s3 b4+s4 bm+sm 

B^Pq -Pi ■ P2 ■ P3 ■ P4 ■■ Pm 

x, xO+uO x1+u1 x2+u2 x3+u3 x4+u4 xm+um 

X <- P 0 ■ Pi ■ P 2 ■ P3 ■ P4 ■ Pm 

~ dO+vO d1+v1 d2+v2 d3+v3 d4+v4 dm+xm 

D <" P 0 " Pi ■ P2 ■ P3 ■ P4 -Pm 

[0022] The prime generator will push the 4 numbers above to the nearest prime number within the neighborhood, 
as in the case of the current application, 256-bits in size. 

A prime <~ Nextprime (A) 
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B P rime <" Nextprime (B) 



X Drime <- Nextprime (X) 



'prime 

D P rime <" Nextprime (D) 

[0023] The three variables (A prjme , B prjme , X prjme ) above are then subjected to further encryption process and hashing 
function again to randomize the variables even further. However, at this step, the variables are encrypted based on its 
respective master key, where:- 

A P rime,encry P ted <" Symmetric Encryption (A prime , MasterKey 1) 

B prime,encry P ted <~ Symmetric Encryption (B prime , MasterKey 2) 

x P rime,encrypted <- Symmetric Encryption (X prjme , MasterKey 3) 
[0024] The prime number associated with each of the above is then defined as the following; 

A <- Nextprime (A prjme encrypted ) 

B <- Nextprime (B prime encrypted ) 

X 0 <- Nextprime (X prime e 

ncrypted / 

[0025] The parameter X 0 is now ready to be the initial point on the elliptic curve as defined by the following equation, 
Y 0 2 = X 0 3 + AX 0 + B (mod P) in step (60). The square root of Y 0 of X 0 3 + AX 0 + B on field F p is then computed. The 
initial point on the chosen elliptic curve is then defined as (X 0 Y 0 ). Next, the fourth variable (D) computed after the 
process of finding the prime number is then subjected to encryption and hashing function based on the fifth master 
key (MasterKey 4). It is defined as, D ^- Symmetric Encryption (D prjme , MasterKey 4) and this randomized number is 
known as the private key associated with the inputted ID. It will be multiplied with the initial point (X 0 , Y 0 ) to obtain the 
projection point (X 1; Y^. 

(X 1 ,Y 1 ) = D(X 0 ,Y 0 ) 

[0026] The public key associated with the inputted ID is then defined as a series of the following computed variables 
from the whole process. 

Public key = (X 0 , Y 0 ) , (X 1 , Y^, A, B, P. 

[0027] The public key shall be encrypted again before sending it to the public key address book/storage. The address 
associated with this public key set may be published and for use in association with the multi-functional security envi- 
sioned by the present invention. 

[0028] To further illustrate the concept of randomizing and obtaining the prime of a particular inputted ID, the following 
may be of some reference. 

[0029] Elliptic Curve Cryptosystem (ECC) consists 256-bit modulo prime P. Let the inputted ID be 32 visible charac- 
ters. Six bits is assigned for each of the ID character. Then the ID will consists of 1 92 bits (32 characters X 6 bits). Let 
P be written in Hexadecimal format. 
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[0030] P=FFFFFFFFFFFFFFF Fxxxxxxxxxxxxxxxxyyyyyyyyyyyyyyyyzzzzzzzz zzzzzzzz . 

F represents the value of 2 4 - 1 =15. The first hexadecimals of P is set to be F's. The next 48 hexadecimal will be 
determined by the 192-bits ID after undergoing the encryption and hashing process. The second string 
(xxxxxxxxxxxxxxxx) and third string (yyyyyyyyyyyyyyyy) are taken from the ID after going through Advance Encryption 
5 Standard (AES) encryption and secure hashing algorithm SHA-2. The third (yyyyyyyyyyyyyyyv) and fourth string 
(zzzzzzzzzzzzzzzz) are taken from another round of AES encryption and secure hashing algorithm SHA-2. Then P will 
be made prime after going through the NextPrime function, where P = NextPrime (P). 

[0031] Referring now to Figure 3, where the next optional steps associated with the embodiment of the invention 
may be performed. In this figure, the Public Key set as defined earlier {(X 0 , Y 0 ),(X-|, Y^, A, B, P} is subjected to an 

10 encryption based on the sixth master key (MasterKey 5) using generally known encryption algorithm such as AES, 
CAMELLIA, SEED or any other algorithm in (70). A user-selected PINWORD (80) is inputted via the input device and 
it will be used as the session key for further encryption of the private key computed from the previous steps based on 
the seventh master key (MasterKey 6). It will then be subjected to hashing to make it random and stored. The system 
is now ready for any application, in particular the multi functional security systems parameters as envisaged by the 

15 inventors. 

[0032] It is believed that the embodiment of the present invention may be incorporated into many other applications. 
While the preferred embodiments of the present invention have been described, it should be understood that various 
changes, adaptations and modifications may be made thereto. It should be understood, therefore, that the invention 
is not limited to details of the illustrated invention shown in the figures and that variations in such minor details will be 
20 apparent to one skilled in the art. 



Claims 

25 1. An apparatus adapted for the generation of a public key for use in association with encryption and decryption of 
digital data, said apparatus comprises of:- 

a computer means (1) having at least a processor (2), a memory unit (3) and an input device (4); and 

30 a key generation module (5) residing in said memory unit; 

characterized in that said:- 

said key generation module processes a user-definable and recognizable ID of ASCII characters that is in- 
35 putted via said input device to generate said public key. 

2. An apparatus as claimed in claim 1 , further characterized in that said apparatus is a PC having said key generation 
module residing in its memory. 

40 3. An apparatus as claimed in claim 1 , further characterized in that said apparatus is a mobile device having said 
computer means. 

4. An apparatus as claimed in claim 2, further characterized in that said PC is arranged in a stand-alone configuration 
and/or connected to at least another PC through an on-line connection. 

45 

5. A method for generating a public key for use in association with encryption and decryption of digital data compris- 
ing:- 

a key generation module (5) residing in a memory unit (3) of a computer means (1), said computer means 
50 having at least a processor (2), said memory unit (3) and an input device (4); 

characterized in that :- 

said key generation module (5) processes a user-definable and recognizable ID of ASCII characters inputted 
55 via said input device to generate said public key, said method comprises the steps of:- 

a) setting at least six predetermined master keys (MasterKey 0, MasterKey 1 , MasterKey 2, MasterKey 
3, MasterKey 4, MasterKey 5); 
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b) randomizing said inputted user-definable and recognizable ID of ASCII characters and computing a 
modulus P associated with said user-definable and recognizable ID of ASCII characters; 

c) computing first (A), second (B), third (X) and fourth (D) variables by encrypting said inputted user- 
definable and recognizable ID of ASCII characters based on said first master key (MasterKey d) and 
subjecting said encrypted user-definable and recognizable ID of ASCII characters to a hashing function 
and thereafter, dividing it into four equal length variables, said equal length variables correspond to said 
first (A), second (B), third (X) and fourth (D) variables, respectively; 

d) determining the prime number associated with each of said variables; 

e) randomizing the prime number of said first (A), second (B) and third (X) variables in step d) by encrypting 
each of said prime number based on said second master key (MasterKey 1 ), third master key (MasterKey 
2) and fourth master key (MasterKey 3), respectively; 

f) hashing said encrypted first (A), second (B) and third (X) variables in step e) and determining the prime 
number associated with each of said variables; 

g) defining the prime number of said third (X) variable as X 0 ; 

h) initializing the initial point (X 0 ) on an elliptic curve as defined by Y 0 2 = X 0 3 + AX 0 + B(mod P) equation, 
and computing the corresponding initial point (Y 0 ) ; 

i) encrypting the prime of said fourth variable (D) in step d) based on said fifth variable (MasterKey 4) and 
thereafter subjecting said encrypted variable to a hashing function and defining it as a private key asso- 
ciated with said inputted user-definable and recognizable ID of ASCII characters; 

j) computing a projection point (X 1? of said public key on the elliptic curve by multiplying said initial 
point (X 0 ,Y 0 ) with said fourth variable (D) computed in step i); and 

k) defining said public key set as a series of X 0 ,Y 0 , X-^Y., ,A,B and P computed from the steps of a) to j). 

6. A method as claimed in claim 5, further characterized in that said public key set is encrypted based on said sixth 
master key (MasterKey 5). 

7. A method as claimed in claim 5, further characterized in that said user-definable and recognizable ID of ASCII 
characters is first converted into its binary equivalent of at least 128-bits in length before being subjected to the 
steps of b) to k), and if said binary equivalent is having less than 128-bits in length, an external bit is padded to 
obtain the equivalent 128-bits in length. 

8. A method as claimed in claim 5, further characterized in that said computed first (A), second (B), third (X) and 
fourth (D) variables in step c) are at least 256 bits in length. 

9. A method as claimed in claim 5, further characterized in that a user-selected pinword is inputted via said input 
device and a seventh master key (Master key 6) is also set beforehand. 

10. A method as claimed in claim 5, further characterized in that said private key as defined in step i) is encrypted 
based on said seventh master key (MasterKey 6) and thereafter subjected to a hashing function and thereafter 
stored. 

11. A method as claimed in any of claims 5 to 9, further characterized in that said master keys (MasterKey 0, Mas- 
terKey 1 , MasterKey 2, MasterKey 3, MasterKey 4, MasterKey 5, MasterKey 6) are at least 256-bits in length. 
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